TMA-CHECKPOINT-3.7
Ensure no Allow Rule with Any in Services filed present in the Firewall Rules
HighLevel 2Manual reviewcheckpoint
Description
The Firewall Rules with Any in the Service field allows accessing all the Services from specified Source to specified Destination configured in the Firewall rules.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify there are no allowed rules present in the firewall which has Any used in the Service field.
How it is fixed
Fix method: Guidance or infrastructure patch
Delete the rule from the firewall which has Any used in the Service field.
Properties
- Operating systems
- Any
- Tags
- checkpointfirewall-policy
- Reference
- CIS Check Point Firewall Benchmark v1.1.0 - 3.7 Ensure no Allow Rule with Any in Services filed present in the Firewall Rules